Hy Myrti, Sorry for the delay in responding to you, I have been out of town for the last several weeks away from the PCs with the possible false positives. I tried to scan with developer as the page suggested but the PC locked during/after the scan. The signature files were updated before I tried the scan. The log from the developer scan does not show any hits. The log from the normal scan that I ran about a month ago does. So I will post this log and a zipped copy of the target file. Malwarebytes Anti-Malware 1.62.0.1300 www.malwarebytes.org Database version: v2012.07.31.01 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Bob :: S..........2 [administrator] 7/30/2012 9:08:40 PM mbam-log-2012-08-01 (23-48-29)_PC2.txt Scan type: Full scan (C:\|D:\|E:\|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 294424 Time elapsed: 2 hour(s), 43 minute(s), 6 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 E:\S.......1-data-110803\Downloads\Nvidia\nf2_v264_WDMxp\nf2_v264_WDMxp\AudioDrv\ (Trojan.Sirefef) -> No action taken. (end) nvax9x.zip I'd like to know what you find out. Please reply with your results. Thanks, Bob